Can I use the dmarc result in a message filter or a content filter

[Tony Kilbarger]

I have a request from our security team to write a filter to quarantine or block email with a couple conditions including what the dmarc result is.  The email is from a domain that is currently p=none.  Wondering if I can use the dmarc result in a filter along with the envelope sender and from address.  If not, is there a way to add an x-header with the dmarc result I could perhaps key on in an Exchange Transport rule.

Thanks for any help.

[Ken Stieers]

You should be able to build a filter based on the "Authentication-Results" header.